
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/92C1EB1E044111ECA6AF2D4BC4F9AE02.roa
File: 92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (raw, json)
Hash identifier: xX6xLmXsGMhA6ynOHDJr+09/J6zrlE/mAc8SSCuWzQ4=
Subject key identifier: 06:21:3C:3F:4B:7E:80:EB:74:D1:BB:1F:CE:7D:76:E7:0E:B1:E5:A0
Certificate issuer: /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Certificate serial: 0678
Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/92C1EB1E044111ECA6AF2D4BC4F9AE02.roa
Signing time: Fri 24 Jul 2026 23:44:10 +0000
ROA not before: Fri 24 Jul 2026 23:44:10 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 142421
IP address blocks: 103.168.40.0/23 maxlen: 24
2001:df6:cc80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 23:10:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1656 (0x678)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5F25, serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D
Validity
Not Before: Jul 24 23:44:10 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a63f8c9-5116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1d:ad:e6:04:8c:cc:4a:0e:4b:94:ea:50:69:
b2:b4:70:61:da:9b:21:ad:3c:a9:72:bb:6c:da:83:
1f:79:7d:8f:87:28:46:91:4d:f8:14:d1:d2:04:ad:
ca:f0:22:77:0c:61:23:63:d7:d4:2d:35:b0:3f:0e:
9b:07:e4:c2:02:6e:f8:fb:62:54:63:ed:f2:fb:fa:
a8:c1:0e:2d:e0:1f:d9:43:ce:6e:cf:ee:79:e8:a7:
b0:79:d8:3f:cb:ea:d2:ee:b4:0a:af:37:04:b5:e7:
db:48:eb:40:3b:2c:41:7e:e2:88:fe:4f:b8:d6:64:
04:ab:91:5c:cc:d8:a6:8f:20:ed:7e:e7:bb:16:5c:
62:f8:8e:35:8c:77:a4:e7:6c:09:2c:de:93:5c:a8:
7a:7f:75:e8:d7:a9:97:06:df:37:2a:3f:7b:ab:71:
dd:f2:71:44:e7:f0:66:a2:d3:b5:5b:52:27:a0:79:
cd:01:54:9d:b7:e2:c5:c0:bc:55:19:30:1c:fc:d9:
10:e3:6f:11:5d:ab:46:79:be:ee:69:43:05:39:cc:
a8:66:a1:6c:f6:5d:14:0b:9f:7d:b9:fc:c7:11:f0:
57:45:8f:e8:f0:4a:84:78:26:a7:f5:49:3e:0e:7c:
bf:67:42:d8:31:52:b9:98:ad:ac:9b:08:70:99:40:
d1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:21:3C:3F:4B:7E:80:EB:74:D1:BB:1F:CE:7D:76:E7:0E:B1:E5:A0
X509v3 Authority Key Identifier:
keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/92C1EB1E044111ECA6AF2D4BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.40.0/23
IPv6:
2001:df6:cc80::/48
Signature Algorithm: sha256WithRSAEncryption
43:32:c3:e7:5e:75:ec:ad:11:fa:64:71:83:07:2b:43:2c:87:
69:90:2d:7f:c1:a2:fa:03:86:61:f2:68:d0:62:1c:5a:78:8d:
e2:dd:a1:ca:97:e0:ad:cc:f0:48:84:38:69:8a:ef:d2:bf:cc:
fe:93:fc:c2:e8:6d:53:03:90:79:cf:5a:21:0f:fa:2d:88:5f:
33:a8:7e:e3:c2:fa:24:c1:ef:f7:47:ef:74:07:ff:bd:8c:85:
14:29:48:4a:9c:56:63:e9:01:63:76:07:eb:bd:cb:06:e5:5f:
cd:4c:1c:4b:51:a6:7c:c0:64:51:63:f6:4d:7c:10:af:06:60:
db:41:f7:cf:9a:91:45:45:30:78:ac:0f:b9:5b:7e:50:0c:28:
5c:c5:d6:cf:13:42:fc:4a:6b:f6:4f:68:4c:1c:5f:22:47:79:
d9:48:99:a1:2c:95:08:f4:a1:fb:fd:2c:47:fc:82:2e:67:8e:
db:e6:3e:bd:33:1e:fb:fe:73:c4:ab:b1:7d:63:14:d8:50:ed:
ba:4c:c2:91:1d:49:7c:ae:a3:40:dc:06:ec:7f:cf:d0:51:34:
c5:fe:51:25:ef:66:e7:45:15:93:88:6c:4e:2e:f2:49:0b:72:
d9:f1:82:dd:63:48:63:f4:86:e6:75:5e:92:7f:07:3c:e0:98:
70:53:5a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:35:33 2026 by rpki-client